General
-
Target
9724609254356ed8a51a174e36a48f50eebc150973c713ebeff602406f4ec9dc_JC.zip
-
Size
158KB
-
Sample
231011-g6c5daeh3s
-
MD5
db2d457f6f55d06141969eb57ae58fb9
-
SHA1
61d83379e29a84f8cc1547f02ce91c6749e1c9d4
-
SHA256
9724609254356ed8a51a174e36a48f50eebc150973c713ebeff602406f4ec9dc
-
SHA512
407accebc271c627c864836346c39248cd8195a6cf2fd56fa8a1d12e7df147ea37e6be3275e131c2c07c585082e76a037619d5cea902d188034cd8103c0f2733
-
SSDEEP
3072:HtpWiuX76JKRwiVcVKEup96IFDKbC78kViC+/SBtEJVa/PKujPE2v4m:2z+JKSImFODpAkVy/SH6Va/CujP9v
Static task
static1
Behavioral task
behavioral1
Sample
client.exe
Resource
win7-20230831-en
Malware Config
Extracted
gozi
Extracted
gozi
5050
netsecurez.com
whofoxy.com
mimemoa.com
ntcgo.com
-
base_path
/jerry/
-
build
250260
-
exe_type
loader
-
extension
.bob
-
server_id
50
Targets
-
-
Target
client.exe
-
Size
267KB
-
MD5
5a84945991cf24c957cf67fd414c9f9a
-
SHA1
06206df47fd0805d616f31b5e56daa6378409e72
-
SHA256
5633a46c25aced4b07728fd437b92c5e9102eabaa134ac584e2aae2e0adce587
-
SHA512
307f16d760c0adbeb829705e6db167c460c7d048da56049a8240c6cf6de69c2e6f41fcb9cca7c2e2ee03b8b5cbe8132f346fc3626c39e7f4de6c6d0cbfce2ed2
-
SSDEEP
6144:ZWO3FffE31kwsQODpAkVyakH7bWMxNTf:EOFf8lDsQsVyaOP5
-